|
Date Reported: 26th August 2017  |
Risk Level: MEDIUM |
|
| |
 |
 |
| |
Email Subject: |
Your recent bill is ready - NatWest credit card. |
|
Apparent Sender: |
NatWestCreditCards@natwest.com |
|
Return Address: |
natwestcard@eir.net |
|
| Email Format: |
HTML |
| |
URL of Web Content: |
http://ryanfurtner.com/sos/enta.ht
|
|
Anchor text of URLs: |
1) http://ryanfurtner.com/sos/enta.ht |
|
Location: |
INDOOROOPILLY, QUEENSLAND, AUSTRALIA |
| |
Scam number: |
26120-596194-732183 |
| |
Comments: |
- Email asks you to confirm/update/verify your account data at NatWestCreditCards@natwest.com by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.
- NatWestCreditCards@natwest.com never send their users emails requesting personal details in this way.
- The anchor text appears as a legitimate URL, but don't be fooled - clicking on it will take you to a phishing site!
- The spoof website this email links to was not online at time of this report, but variations of the scam which link to working websites are bound to exist, so be wary! The website may have been taken down or disabled by the hosts, but quite often these websites are hosted on the personal computer of the phishers, so may only be online at certain times.
|
| |
|
|
|
 |
| |
|
| |
X-CMAE-Envelope:
MS4wfNS8SsStx10mS6JqjY7IC3S3sDrfrb7CYR319Uap6
X2vx4q6OPMyjYnXZbwDXTWhg6h86Crwc6dWdXUt+EWTpA
vsRpe+nJAawwr+1R7BJjluo8n9xXL/
xcj8dOwPoFA/MUEnUQOiNx7VzETyxfPPDi/5FsRTvlHH
QBjKjypn7RYTJ3miA/avqAJm/uNyEoV780x778GkVXCuW
9zx11J7QfE=
You will not see this in a MIME-aware mail
reader.
--==============21413013==
Content-Type: text/plain;
charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
|
|
|
| |
| Website: |
|
|
| |
|
| Website was not online when we checked. It returned the error 404 |
